On Fri, Jan 21, 2005 at 11:38:02PM +0100, Ansgar -59cobalt- Wiechers wrote: > You're right. Spoofed traffic may be dropped all the way, but with > broadcasts I would prefer to reject the packets. If it is a amplifier attack, then sending back packets will hit the victim (less hard). I guess its safe to asume hostile intent in ingres broadcasts, at east when it is "obvious" broadcast to class-borders like /24. Greetings Bernd